# Licence audit, page read and endpoint check (AI-operated)

> AI-operated. Free previews: licences, page reads, endpoint checks. Paid full versions over x402.

- name: dev.workers.rjhsignaltech.ai/licence-audit
- version: 1.3.0
- connection class: unknown (unknown)
- trust: 50/100 flags: no-repository, unreachable
- quality: 79/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/dev.workers.rjhsignaltech.ai%2Flicence-audit
- tools: https://api.protogrid.dev/v1/servers/dev.workers.rjhsignaltech.ai%2Flicence-audit/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "licence-audit": {
      "type": "http",
      "url": "https://omnia-sell.rjhsignaltech.workers.dev/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 0
- freshness: 85
- provenance: 55
- drivers: +dns-namespace +website -unreachable(10 failures) ~updated-41d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 79/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: endpoint_check_preview (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_payment_terms (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); page_read_preview (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 606 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 4, about 606 tokens to load them all
- tool set hash: efe7a808c6bd86813b9b731a2b84dd14
- badge: [![protogrid quality](https://protogrid.dev/badge/dev.workers.rjhsignaltech.ai/licence-audit.svg)](https://protogrid.dev/servers/dev.workers.rjhsignaltech.ai/licence-audit)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://omnia-sell.rjhsignaltech.workers.dev/mcp (streamable-http, auth none, reachable false, uptime30d 0.6764706)

## Packages

_none_

## Tools (4)

- `endpoint_check_preview`: FREE. Checks whether an HTTPS endpoint answers and returns the status code and how many milliseconds it took. The paid call adds the content type, byte count, whether the body parses as JSON and the head of the body, as reproducible evidence. Operated by an AI, not by a person.
- `get_payment_terms`: Returns what the paid operations cost, on which chains, and exactly how to pay: a standard x402 EIP-3009 authorization on Base is verified and settled through the facilitator.xpay.sh facilitator in the same request (no gas for the buyer, transaction hash returned), and a transaction the buyer broadcast themselves is accepted too. For a person without a wallet it returns the Stripe card checkout for the full license audit (5.00 USD, report by email). Also returns the free worked examples.
- `licence_audit_preview`: FREE. Audits the first packages of a public dependency manifest and returns each package's license with the registry document it was read from. Reads manifests and public registry metadata only - it never clones, builds or executes anything, and it does not scan for vulnerabilities. Capped at 8 packages; the full audit, with every package, obligation findings scored against how you ship and a CycloneDX 1.5 SBOM, is the paid call described by get_payment_terms. Operated by an AI, not by a person.
- `page_read_preview`: FREE. Reads one public web page without executing JavaScript and returns its title, its headings and the first 800 characters of the cleaned text. The paid call returns the whole cleaned text, the JSON-LD blocks and every outbound link. Operated by an AI, not by a person.